1307026 - goog-phish-proto is not available with mozilla API key

Status: RESOLVED FIXED

(Toolkit :: Safe Browsing, defect, P2)

Comment 1

[Henry Chang [:hchang]]

There are public and private phishing list for both v2 and v4. We are supposed to be able to use the private one with mozilla API key. However, v4 internal phishing list is still not accessible with mozilla API key. The corresponding threat type is SOCIAL_ENGINEERING [1]

[1] https://dxr.mozilla.org/mozilla-central/rev/7c576fe3279d87543f0a03b844eba7bc215e17f1/toolkit/components/url-classifier/chromium/safebrowsing.proto#266

Comment 2

[François Marier [:francois]]

I will take this and follow-up with Google.

Comment 3

[Henry Chang [:hchang]]

$ curl -s -L --head  --header "X-HTTP-Method-Override: POST" "https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?%24req=CgkKB0ZpcmVmb3gaCggFEAIiAiABKAE=&%24ct=application/x-protobuf&key=AIzaSyD_Drzahe4dBzGCZ9ArvowCvrPx_yFrlCM"

$ HTTP/1.1 200 OK
Content-Type: application/x-protobuf
Content-Disposition: attachment
Date: Tue, 18 Oct 2016 07:27:29 GMT
Server: ESF
Cache-Control: private
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="36,35,34"
Transfer-Encoding: chunked
Accept-Ranges: none
Vary: Accept-Encoding